@wenathlan/saddle 2.0.171 → 2.0.172

package/Dockerfile

@@ -307,6 +307,76 @@ RUN apt-get update \
     # degrades to a no-op at runtime - the sources are dead weight.
     && rm -rf node_modules/cpu-features/deps \
     && find node_modules -type f -name Dockerfile -delete
+# THE TOOLCHAIN LAYER — the fourteen planned seats walk live (the pr13
+# completion law): the engine host carries the runtimes the language,
+# build and wasi seats spawn, every carrier pinned to the exact version
+# the engines catalog answers and the assert after every install proving
+# the binary answers its version. the apt lanes (make, ninja, lua, php,
+# the gcc toolchain the v and nim codegen rides) install on every arch
+# leg debian ships them for; the prefab carriers (rustup 1.99.1, zig
+# 0.17.1, wasmtime 50.0.1, v 0.5.2, nim 2.4.0, dotnet sdk 10.0.403)
+# ride the two native legs (amd64, arm64) their publishers ship — the
+# exotic legs (ppc64le, s390x) answer the honest coded absence the
+# seats' probes name at dispatch (HOST_RUNTIME_ABSENT — the seat never
+# fakes a run), the same law the arch case above carries.
+RUN set -eux; \
+    arch="${TARGETARCH:-$(dpkg --print-architecture)}"; \
+    apt-get update; \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+      build-essential ca-certificates curl git lua5.4 ninja-build php-cli unzip xz-utils; \
+    ln -sf /usr/bin/lua5.4 /usr/local/bin/lua; \
+    make --version | head -1; \
+    ninja --version; \
+    lua -v; \
+    php --version | head -1; \
+    case "$arch" in \
+      amd64|arm64) \
+        rustuparch="x86_64-unknown-linux-gnu"; \
+        [ "$arch" = "arm64" ] && rustuparch="aarch64-unknown-linux-gnu"; \
+        curl -fsS https://sh.rustup.rs -o /tmp/rustup-init.sh; \
+        sh /tmp/rustup-init.sh -y --profile minimal --default-toolchain 1.99.1 \
+          --no-modify-path --default-host "$rustuparch"; \
+        rustctool="/root/.rustup/toolchains/1.99.1-${rustuparch}/bin"; \
+        ln -sf "$rustctool/rustc" /usr/local/bin/rustc; \
+        ln -sf "$rustctool/cargo" /usr/local/bin/cargo; \
+        rustc --version; \
+        cargo --version; \
+        zigarch="x86_64"; [ "$arch" = "arm64" ] && zigarch="aarch64"; \
+        curl -fsSL "https://ziglang.org/download/0.17.1/zig-linux-${zigarch}-0.17.1.tar.xz" \
+          -o /tmp/zig.tar.xz; \
+        mkdir -p /opt/zig; \
+        tar -xJf /tmp/zig.tar.xz --strip-components=1 -C /opt/zig; \
+        ln -sf /opt/zig/zig /usr/local/bin/zig; \
+        zig version; \
+        wasmtimearch="x86_64"; [ "$arch" = "arm64" ] && wasmtimearch="aarch64"; \
+        curl -fsSL "https://github.com/bytecodealliance/wasmtime/releases/download/v50.0.1/wasmtime-v50.0.1-${wasmtimearch}-linux.tar.xz" \
+          -o /tmp/wasmtime.tar.xz; \
+        mkdir -p /opt/wasmtime; \
+        tar -xJf /tmp/wasmtime.tar.xz --strip-components=1 -C /opt/wasmtime; \
+        ln -sf /opt/wasmtime/wasmtime /usr/local/bin/wasmtime; \
+        wasmtime --version; \
+        git clone --depth 1 --branch 0.5.2 https://github.com/vlang/v.git /opt/v; \
+        make -C /opt/v; \
+        ln -sf /opt/v/v /usr/local/bin/v; \
+        v version; \
+        git clone --depth 1 --branch v2.4.0 https://github.com/nim-lang/Nim.git /opt/nim; \
+        sh -c 'cd /opt/nim && sh build_all.sh'; \
+        ln -sf /opt/nim/bin/nim /usr/local/bin/nim; \
+        nim --version | head -1; \
+        curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh; \
+        bash /tmp/dotnet-install.sh --channel 10.0 --version 10.0.403 --install-dir /usr/share/dotnet; \
+        ln -sf /usr/share/dotnet/dotnet /usr/local/bin/dotnet; \
+        dotnet --version; \
+        ;; \
+      *) \
+        echo "the toolchain layer answers the honest coded absence on ${arch}: the prefab carriers ship amd64 and arm64 alone (the seats' probes name the requirement at dispatch)" ;; \
+    esac; \
+    rm -rf /var/lib/apt/lists/* /tmp/* /opt/nim/.git /opt/v/.git; \
+    mkdir -p /sandbox && chown node:node /sandbox
+ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 \
+    DOTNET_NOLOGO=1 \
+    DOTNET_CLI_HOME=/sandbox/dotnet-home \
+    DOTNET_CLI_LANGUAGE=en
 # the web service surface (self-hosted console): the staged spa plus the
 # pure-node server stack - zero npm dependencies, the node 26 runtime
 # carries everything (node:sqlite, node:crypto, native type stripping
@@ -511,7 +581,21 @@ LABEL org.opencontainers.image.title="saddle (the android os-distribution lane)"
 FROM scratch AS osgrapheneos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="grapheneos"
-ENV SADDLE_OS_PROFILE=grapheneos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=grapheneos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the grapheneos os-distribution catalog lane)" \
       org.opencontainers.image.description="the grapheneos os-distribution seat as a catalog lane: a privacy and security hardened version of android — no runnable container base exists for an android firmware seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -522,7 +606,21 @@ COPY osprofiles/grapheneos.json /saddle/osprofile.json
 FROM scratch AS osmaruos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="maruos"
-ENV SADDLE_OS_PROFILE=maruos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=maruos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the maru os os-distribution catalog lane)" \
       org.opencontainers.image.description="the maru os os-distribution seat as a catalog lane: maru os is firmware, not an application — no runnable container base exists for a firmware seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -533,7 +631,21 @@ COPY osprofiles/maruos.json /saddle/osprofile.json
 FROM scratch AS osv
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="v"
-ENV SADDLE_OS_PROFILE=v
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=v \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the v os-distribution catalog lane)" \
       org.opencontainers.image.description="the v os-distribution seat as a catalog lane: the v language platform target the languagev compiler seat of the ninety modalities answers, never a guest distribution — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -544,7 +656,21 @@ COPY osprofiles/v.json /saddle/osprofile.json
 FROM scratch AS oswindows
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="windows"
-ENV SADDLE_OS_PROFILE=windows
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=windows \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the windows os-distribution catalog lane)" \
       org.opencontainers.image.description="the windows os-distribution seat as a catalog lane: the guest vocabulary the exe seats execute — the container standard answers the windows seats as binary targets, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -555,7 +681,21 @@ COPY osprofiles/windows.json /saddle/osprofile.json
 FROM scratch AS ospostmarketos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="postmarketos"
-ENV SADDLE_OS_PROFILE=postmarketos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=postmarketos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the postmarketos os-distribution catalog lane)" \
       org.opencontainers.image.description="the postmarketos os-distribution seat as a catalog lane: postmarketos is the alpine-based mobile distribution real devices boot — no runnable container base exists for this seat, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -566,7 +706,21 @@ COPY osprofiles/postmarketos.json /saddle/osprofile.json
 FROM scratch AS oslineageos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="lineageos"
-ENV SADDLE_OS_PROFILE=lineageos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=lineageos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the lineageos os-distribution catalog lane)" \
       org.opencontainers.image.description="the lineageos os-distribution seat as a catalog lane: lineageos is the community android continuation — the aftermarket mobile seat on the arm64 legs, the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -577,7 +731,21 @@ COPY osprofiles/lineageos.json /saddle/osprofile.json
 FROM scratch AS oscalyxos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="calyxos"
-ENV SADDLE_OS_PROFILE=calyxos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=calyxos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the calyxos os-distribution catalog lane)" \
       org.opencontainers.image.description="the calyxos os-distribution seat as a catalog lane: calyxos is the privacy-focused android distribution, the hardened mobile seat beside grapheneos — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -588,7 +756,21 @@ COPY osprofiles/calyxos.json /saddle/osprofile.json
 FROM scratch AS osarchlinux
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="archlinux"
-ENV SADDLE_OS_PROFILE=archlinux
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=archlinux \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the archlinux os-distribution catalog lane)" \
       org.opencontainers.image.description="the archlinux os-distribution seat as a catalog lane: archlinux is the rolling-release distribution omarchy builds on, the pacman desktop seat — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -599,7 +781,21 @@ COPY osprofiles/archlinux.json /saddle/osprofile.json
 FROM scratch AS osalpine
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="alpine"
-ENV SADDLE_OS_PROFILE=alpine
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=alpine \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the alpine os-distribution catalog lane)" \
       org.opencontainers.image.description="the alpine os-distribution seat as a catalog lane: alpine is the musl-based lightweight distribution, the small-footprint seat the musl legs answer — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -610,7 +806,21 @@ COPY osprofiles/alpine.json /saddle/osprofile.json
 FROM scratch AS osdebian
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="debian"
-ENV SADDLE_OS_PROFILE=debian
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=debian \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the debian os-distribution catalog lane)" \
       org.opencontainers.image.description="the debian os-distribution seat as a catalog lane: debian is the universal operating system, the apt desktop seat the widest hardware matrix answers — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -621,7 +831,21 @@ COPY osprofiles/debian.json /saddle/osprofile.json
 FROM scratch AS osfedora
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="fedora"
-ENV SADDLE_OS_PROFILE=fedora
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=fedora \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the fedora os-distribution catalog lane)" \
       org.opencontainers.image.description="the fedora os-distribution seat as a catalog lane: fedora is the red-hat-upstream community distribution, the rpm desktop seat beside the apt rows — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -632,7 +856,21 @@ COPY osprofiles/fedora.json /saddle/osprofile.json
 FROM scratch AS osnixos
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="nixos"
-ENV SADDLE_OS_PROFILE=nixos
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=nixos \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the nixos os-distribution catalog lane)" \
       org.opencontainers.image.description="the nixos os-distribution seat as a catalog lane: nixos is the declarative distribution the nix package manager builds, the reproducible-system seat — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \
@@ -643,7 +881,21 @@ COPY osprofiles/nixos.json /saddle/osprofile.json
 FROM scratch AS osvoid
 ARG SADDLE_VERSION=2.0.171
 ARG SADDLE_OS_PROFILE="void"
-ENV SADDLE_OS_PROFILE=void
+ARG SADDLE_TIER="max"
+ARG VHE_PROFILE_CPU="epyc9965"
+ARG VHE_PROFILE_VCPUS="192"
+ARG VHE_PROFILE_THREADS="384"
+ARG VHE_PROFILE_RAM_GB="1024"
+ARG VHE_PROFILE_GPU="b200"
+ARG VHE_PROFILE_GPUS="8"
+ENV SADDLE_OS_PROFILE=void \
+    SADDLE_PROFILE=${SADDLE_TIER} \
+    SADDLE_PROFILE_CPU=${VHE_PROFILE_CPU} \
+    SADDLE_PROFILE_VCPUS=${VHE_PROFILE_VCPUS} \
+    SADDLE_PROFILE_THREADS=${VHE_PROFILE_THREADS} \
+    SADDLE_PROFILE_RAM_GB=${VHE_PROFILE_RAM_GB} \
+    SADDLE_PROFILE_GPU=${VHE_PROFILE_GPU} \
+    SADDLE_PROFILE_GPUS=${VHE_PROFILE_GPUS}
 LABEL org.opencontainers.image.title="saddle (the void os-distribution catalog lane)" \
       org.opencontainers.image.description="the void os-distribution seat as a catalog lane: void is the independent source-rolling distribution, the xbps seat the musl legs answer beside alpine — the lane publishes the profile config the engine reads." \
       org.opencontainers.image.version="${SADDLE_VERSION}" \

package/docs/ninetymodalities.md

@@ -201,3 +201,35 @@ additions (postmarketos, lineageos, calyxos, archlinux, alpine, debian,
 fedora, nixos and void) — with the arch pairings, the engine plan trio
 binding and the plan-resource law. see
 [osdistributions.md](osdistributions.md) for the record.
+
+## the toolchain rung (the pr13 completion law)
+
+the honesty audit's fourteen planned seats walked live: the engine
+container's toolchain layer now carries the runtimes the host-spawn
+seats demand, every carrier pinned to the exact version the engines
+catalog answers and asserted after install —
+
+- the apt lanes every arch leg carries: make, ninja, lua 5.4, php-cli
+  and the gcc toolchain the v and nim codegen rides;
+- the prefab carriers the two native legs (amd64, arm64) carry: rustup
+  1.99.1 (rustc and cargo, edition 2024 answering the rust floor the
+  catalog pins), zig 0.17.1, wasmtime 50.0.1 (the wasi preview runtime),
+  the v 0.5.2 compiler (the exact tag the catalog's v seat answers),
+  nim 2.4.0 and the dotnet sdk 10.0.403 (the lts channel, the
+  file-based app law the seat's `dotnet run payload.cs` rides);
+- the exotic legs (ppc64le, s390x) answer the honest coded absence the
+  seats' probes name at dispatch — HOST_RUNTIME_ABSENT, the seat never
+  fakes a run, the same law the arch case carries.
+
+the host-spawn staging grew the payload-name law: the
+extension-sensitive runtimes answer their own staged filename (the
+payload.wasm, payload.rs, payload.v, payload.cs, payload.zig and
+payload.nim seats beside the cargo manifest harness — the minimal
+Cargo.toml the seat stages beside src/main.rs so `cargo run --offline`
+answers a real build), and the three in-process seats whose executors
+always drove (the serverless v8 isolate, the git objects vfs, the doh
+resolver) walk the live lines they always deserved.
+
+the census answers the ninety-wave promise whole: **81 live, 9 host, 0
+planned, 90 records** — the plan the owner charged, the record never
+pretending a wiring the engine does not drive.

package/modalities.ts

@@ -1576,6 +1576,15 @@ function hostspawnseat(options: {
   env?: Record<string, string>;
   priority?: ModalityPriority;
   probe?: string;
+  /** the staged payload filename — the extension-sensitive runtimes (the
+   * dotnet file-based app that demands .cs, the nim compiler that demands
+   * .nim, the zig and v sources, the wasm module, the cargo manifest)
+   * answer their own staged name instead of the bare payload default. */
+  payloadname?: string;
+  /** the extra staged files one seat's payload model demands beside the
+   * payload itself (the cargo manifest's src tree, the makefile's
+   * includes) — read from the request inputs, never the host. */
+  extrafiles?: (request: ModalityRunRequest) => Record<string, string>;
 }): ModalityExecutor {
   return async (request: ModalityRunRequest): Promise<ModalityRunResult> => {
     const started = Date.now();
@@ -1583,9 +1592,30 @@ function hostspawnseat(options: {
     const profile = request.profile ?? DEFAULTPROFILE;
     const deadline = clampdeadline(request.deadlinems);
     const staging = await stageworkspace(options.slug, request.code);
+    let file = staging.payload;
+    try {
+      const fsp = (await import("node:fs/promises")) as typeof import("node:fs/promises");
+      const nodepath = (await import("node:path")) as typeof import("node:path");
+      if (options.payloadname !== undefined && options.payloadname !== "payload") {
+        file = nodepath.join(staging.dir, options.payloadname);
+        await fsp.mkdir(nodepath.dirname(file), { recursive: true });
+        await fsp.copyFile(staging.payload, file);
+      }
+      if (options.extrafiles !== undefined) {
+        const extras = options.extrafiles(request);
+        for (const [name, content] of Object.entries(extras)) {
+          const target = nodepath.join(staging.dir, name);
+          await fsp.mkdir(nodepath.dirname(target), { recursive: true });
+          await fsp.writeFile(target, content, "utf8");
+        }
+      }
+    } catch (error) {
+      await unstageworkspace(staging.dir);
+      return failureresult(options.slug, options.num, options.lane, error, started);
+    }
     let argv: readonly string[];
     try {
-      argv = options.argv({ code: request.code, file: staging.payload, request });
+      argv = options.argv({ code: request.code, file, request });
     } catch (error) {
       // the gate seats refuse before the plan stamps: the typed refusal
       // (the mz, the elf, the wasm magic laws) answers an honest failed
@@ -2611,7 +2641,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "runnerwasi",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["wasmtime"],
     hardening: ["capability-imports"],
     boot: "hot",
@@ -2630,6 +2660,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       argv: ({ file }) => ["wasmtime", "--dir", "/sandbox::/sandbox", file],
       hardening: ["capability-imports", "wasi-snapshot"],
       probe: "the host must carry wasmtime (the wasi preview runtime)",
+      payloadname: "payload.wasm",
     }),
   },
   {
@@ -2638,7 +2669,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "runnerserverless",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["v8"],
     hardening: ["no-fs", "cpu-quota"],
     boot: "hot",
@@ -3021,7 +3052,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagerust",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["rustc"],
     hardening: ["crate-allowlist"],
     boot: "hot",
@@ -3039,6 +3070,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "rustc",
       argv: ({ file }) => ["rustc", "-O", "--edition", "2024", "-o", "/sandbox/languagerust/payload", file],
       hardening: ["crate-allowlist"],
+      payloadname: "payload.rs",
     }),
   },
   {
@@ -3047,7 +3079,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagecargo",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["cargo"],
     hardening: ["crate-allowlist"],
     boot: "hot",
@@ -3066,6 +3098,18 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       argv: () => ["cargo", "run", "--offline"],
       env: { CARGO_HOME: "/sandbox/cargo", CARGO_NET_OFFLINE: "true" },
       hardening: ["crate-allowlist", "offline-only"],
+      payloadname: "src/main.rs",
+      extrafiles: () => ({
+        "Cargo.toml": [
+          "[package]",
+          "name = \"payload\"",
+          "version = \"0.1.0\"",
+          "edition = \"2021\"",
+          "",
+          "[dependencies]",
+          "",
+        ].join("\n"),
+      }),
     }),
   },
   {
@@ -3074,7 +3118,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagev",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["v"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3092,6 +3136,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "v",
       argv: ({ file }) => ["v", "run", file],
       env: { VFLAGS: "-prod" },
+      payloadname: "payload.v",
       hardening: ["package-allowlist"],
       probe: "the host must carry the v compiler (the 0.5.2 seat the catalog pins)",
     }),
@@ -3129,7 +3174,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagedotnet",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["dotnet"],
     hardening: ["assembly-allowlist"],
     boot: "warm",
@@ -3147,6 +3192,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "dotnet",
       argv: ({ file }) => ["dotnet", "run", file],
       hardening: ["assembly-allowlist", "mz-gate"],
+      payloadname: "payload.cs",
     }),
   },
   {
@@ -3181,7 +3227,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagelua",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["lua"],
     hardening: ["sandbox-env"],
     boot: "hot",
@@ -3207,7 +3253,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagezig",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["zig"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3225,6 +3271,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "zig",
       argv: ({ file }) => ["zig", "run", file],
       hardening: ["package-allowlist"],
+      payloadname: "payload.zig",
     }),
   },
   {
@@ -3233,7 +3280,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagenim",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["nim"],
     hardening: ["package-allowlist"],
     boot: "hot",
@@ -3251,6 +3298,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
       binary: "nim",
       argv: ({ file }) => ["nim", "r", file],
       hardening: ["package-allowlist"],
+      payloadname: "payload.nim",
     }),
   },
   {
@@ -3259,7 +3307,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "languagephp",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["php"],
     hardening: ["ini-lockdown"],
     boot: "hot",
@@ -3366,7 +3414,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "buildmake",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["make"],
     hardening: ["recipe-allowlist"],
     boot: "hot",
@@ -3419,7 +3467,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "buildninja",
     lane: "runner",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["ninja"],
     hardening: ["recipe-allowlist"],
     boot: "hot",
@@ -4040,7 +4088,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "fsgitobjects",
     lane: "sandbox",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["git", "vfs"],
     hardening: ["content-hash", "chunk-catalog"],
     boot: "hot",
@@ -4535,7 +4583,7 @@ export const MODALITYENGINE: readonly ModalitySpec[] = [
     slug: "networkdoh",
     lane: "sandbox",
     isolation: "process",
-    state: "planned",
+    state: "live",
     drivers: ["doh"],
     hardening: ["resolver-allowlist"],
     boot: "hot",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/saddle",
-  "version": "2.0.171",
+  "version": "2.0.172",
   "private": false,
   "description": "binary computing engine that turns distributed storage into a publishable working set carrying the merged virtual-hardware engine (the saddle + e2ugh grand merge)",
   "license": "GPL-3.0-only",
@@ -131,13 +131,13 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -188,7 +188,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -304,13 +304,17 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/cobaia": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/forge": "~2.0.171",
+    "@wenathlan/foundry": "~2.0.171",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/stealthhead": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -361,7 +365,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -477,13 +481,13 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.168",
-    "@wenathlan/cadria": "~2.0.168",
-    "@wenathlan/debonair": "~2.0.168",
-    "@wenathlan/devthink": "~2.0.168",
-    "@wenathlan/getry": "~2.0.168",
-    "@wenathlan/saddle": "~2.0.168",
-    "@wenathlan/vault": "~2.0.168",
+    "@wenathlan/argan": "~2.0.171",
+    "@wenathlan/cadria": "~2.0.171",
+    "@wenathlan/debonair": "~2.0.171",
+    "@wenathlan/devthink": "~2.0.170",
+    "@wenathlan/getry": "~2.0.171",
+    "@wenathlan/saddle": "~2.0.171",
+    "@wenathlan/vault": "~2.0.171",
     "add": "^2.0.9",
     "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
@@ -534,7 +538,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.8",
+    "postcss-selector-parser": "^7.2.0",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -572,13 +576,13 @@
     "webpack": "^5.112.2",
     "webpack-cli": "^7.3.1",
     "wouter": "^3.13.0",
+    "xcode": {
+      "uuid": "11.1.1"
+    },
     "yaml": "^2.9.1",
     "z-ai-web-dev-sdk": "^0.0.18",
     "zod": "^4.6.7",
-    "zustand": "^5.1.0",
-    "xcode": {
-      "uuid": "11.1.1"
-    }
+    "zustand": "^5.1.0"
   },
   "type": "module",
   "sideEffects": false,
@@ -698,6 +702,5 @@
     "quantum.ts"
   ],
   "main": "./index.ts",
-  "types": "./index.ts",
-  "optionalDependencies": {}
+  "types": "./index.ts"
 }

package/sandbox.ts

@@ -2244,8 +2244,24 @@ export function specenvlimits(env: Record<string, string | undefined>): sandboxs
 /** the three runtime bases of the saddle fleet. */
 export type sandboxbaseid = 'max' | 'balanced' | 'lite';
 
-/** the guest operating systems a sandbox can boot. */
-export type sandboxosid = 'android' | 'grapheneos' | 'linux' | 'omarchy' | 'windows';
+/** the guest operating systems a sandbox can boot — the eleven-seat OS
+ *  tab the owner's standardization ordered: the five historical seats
+ *  (android, grapheneos, linux, omarchy, windows) beside the six catalog
+ *  distributions that carry honest amd64 and arm64 legs in the published
+ *  grid (vanillaos, archlinux, alpine, debian, fedora, nixos), so the OS
+ *  chip row answers the same breadth the container catalog ships. */
+export type sandboxosid =
+  | 'android'
+  | 'grapheneos'
+  | 'linux'
+  | 'omarchy'
+  | 'windows'
+  | 'vanillaos'
+  | 'archlinux'
+  | 'alpine'
+  | 'debian'
+  | 'fedora'
+  | 'nixos';
 
 /** the guest cpu architectures (amd64 == the x86_64 of the engine bank). */
 export type sandboxarchid = 'arm64' | 'amd64';
@@ -2267,6 +2283,12 @@ export const SANDBOXOSES: readonly sandboxosid[] = [
   'linux',
   'omarchy',
   'windows',
+  'vanillaos',
+  'archlinux',
+  'alpine',
+  'debian',
+  'fedora',
+  'nixos',
 ];
 export const SANDBOXARCHES: readonly sandboxarchid[] = ['arm64', 'amd64'];
 export const SANDBOXFORMS: readonly sandboxformid[] = ['runtime-node', 'full-docker', 'published'];

package/tsconfig.json

@@ -24,6 +24,9 @@
     "moduleResolution": "NodeNext",
     "types": ["node", "vite/client"],
     "paths": {
+      "@wenathlan/vault/labelstore": ["../vault/labelstore.ts"],
+      "@wenathlan/vault/onboardingstore": ["../vault/onboardingstore.ts"],
+
       "@/*": ["./sol/*", "./*"],
       "@saddle/isolation": ["./isolation.ts"]
     }